Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions to bypass intended command restrictions via a crafted environment variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sudo 输入验证漏洞
Vulnerability Description
Sudo是软件开发者Todd C. Miller所研发的一套用于类Unix操作系统下并允许用户通过安全的方式使用特殊的权限执行命令的程序。 Sudo 1.8.5之前的1.6.9版本中存在安全漏洞，该漏洞源于当使用env_reset时，程序没有正确检查环境变量。本地攻击者可借助特制的环境变量利用该漏洞以sudo权限绕过既定的命令限制。
CVSS Information
N/A
Vulnerability Type
N/A